There is nothing technodeterministic about this. Sure, governance is another option, but it would have to be accountable and collective. Otherwise it's just an intermediary holding data on a pinky promise. It's just like the Chrome problem, that's not governance.